I've seen the security module under the rendering settings which appears to allow you to disable "strip javascript" however I don't think this works yet. Is this actually a feature that will be implemented?